Linux Patching Capabilities

Vendors typically stop producing patches for end-of-life operating systems, even for critical issues. If you are faced with this or a similar issue, we can provide key fixes and patches that may not be available for end-of-life versions. These patches can be provided for key services such as Secure Shell, which usually cannot be disabled as a workaround for a critical flaw. We have the expertise to create new base OS (BOS) packages for Linux, so long as a code-fix is freely available, to cover these issues and provide a real fix to older Linux systems.

Here is a list of issues for which PARSEC can provide internally sourced non-vendor replacement patches for critical vulnerabilities. Note that this list covers (more than) all default Linux network services:

• Secure Shell
• Network Time Protocol
• Telnet, rsh, rlogin, and rexec (though customers should really migrate these to SSH, since these are unencrypted services anyway)
• Talk, ntalk, and writesrv
• Sendmail
• SNMP
• inetd and its internal services

We specifically cannot provide patches for these situations:

• Kernel patches for proprietary features or drivers
• Most local-only privilege escalation issues
• Vendor or 3rd party drivers
• Linux-specific proprietary software where no open source analog or public source code exists.